$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdc1b876-0265-44a4-9d94-daa0d2842e50.roa File: cdc1b876-0265-44a4-9d94-daa0d2842e50.roa (raw, json) Hash identifier: IxYe6WFg11+pprPd0L7vdHBZUwP8+s7rfIcASHDP3Wo= Subject key identifier: 2A:E4:2D:04:F2:60:16:64:53:FB:9E:C6:FD:B3:B8:34:E9:48:F7:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5729604863030B7943E27384D9F20F0E4E457CC0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdc1b876-0265-44a4-9d94-daa0d2842e50.roa Signing time: Fri 19 Sep 2025 00:42:47 +0000 ROA not before: Fri 19 Sep 2025 00:42:47 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:29:60:48:63:03:0b:79:43:e2:73:84:d9:f2:0f:0e:4e:45:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:42:47 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=fa424ca474dafd664efa57e826dc527ea6f905c84b703f93bd0a12898657796b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:cf:e6:a1:1e:a5:7a:52:2d:da:e9:2c:76: 84:6a:2b:4b:84:0d:9f:97:b7:6a:80:b1:7e:34:a5: ee:a8:9c:bf:52:fc:3a:73:80:a1:67:9b:34:f1:a1: 2f:bb:d5:c6:7a:e5:a3:eb:95:70:88:1c:6c:ac:93: e7:91:89:3f:14:09:b1:63:ed:88:87:df:94:1a:6d: 71:fe:eb:1c:80:1f:a8:f8:7b:d1:3c:59:68:12:24: 68:ea:ca:c4:37:b4:59:6e:1d:73:3f:63:87:10:13: 53:4b:bd:98:da:f8:0b:37:c5:0b:6e:ec:5c:a2:34: 7f:df:1c:e6:10:d9:55:f2:e5:23:6d:c6:48:e2:10: 19:a3:86:f9:ce:46:36:a9:9f:d2:1b:df:70:65:82: 8f:82:c2:db:05:83:9b:fa:8f:87:a4:c2:6f:d0:91: 22:0b:0f:a1:b0:0b:8a:4a:1b:db:25:5d:63:00:9e: 2c:2b:12:11:7f:f2:c5:bd:5b:9f:63:f3:7f:c4:22: 0f:33:6b:0b:c3:4f:8f:50:bb:7b:d4:17:bf:91:7c: d9:7c:d7:00:48:c2:00:56:99:ea:89:39:88:90:24: d1:30:ae:62:36:7d:99:23:80:2a:29:1b:7d:0a:21: b6:dd:f5:be:4f:78:4f:9d:f0:b6:03:4d:e5:cb:fb: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:2D:04:F2:60:16:64:53:FB:9E:C6:FD:B3:B8:34:E9:48:F7:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdc1b876-0265-44a4-9d94-daa0d2842e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.20.0/22 Signature Algorithm: sha256WithRSAEncryption 66:c5:8c:23:5c:8f:03:cf:51:a0:a1:7f:a0:6e:c5:90:f7:08: 9e:74:66:35:e5:8e:c9:3a:73:85:68:4c:eb:76:55:51:db:18: 7e:e2:fa:93:a2:02:c3:46:72:1d:80:29:ca:73:a7:5b:18:92: dd:12:e2:c7:db:70:62:97:58:f0:45:e8:b4:7c:24:cd:3d:6e: 5d:c9:4f:64:cf:c0:51:b5:73:59:13:63:87:c0:bc:ab:be:5f: c8:79:5e:07:c5:7d:75:84:f8:be:18:bf:ca:f6:b2:8a:bb:14: 0b:96:af:df:f8:5e:b7:24:fc:80:79:53:b6:21:b3:27:a3:52: 4f:5c:ae:bc:8b:97:17:aa:28:ee:84:7c:83:60:ee:14:b9:b0: d5:07:85:30:3e:ec:3e:14:36:8c:7f:89:8d:b0:07:08:5b:2c: 7d:42:db:98:5c:cc:61:62:27:1c:48:98:f5:cb:38:5b:0e:d6: 94:67:01:2a:cd:f1:29:26:11:53:c9:38:5e:01:97:97:ad:59: 45:f1:60:e2:1b:73:eb:21:ef:6c:5e:3c:33:4d:a2:b5:fc:02: f1:09:93:cb:65:21:1a:83:d1:9d:43:b7:53:49:4c:84:83:9f: 11:35:df:32:03:68:c7:b4:6b:93:67:52:90:95:a2:06:2a:3d: 8a:9c:cd:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVylgSGMDC3lD4nOE2fIPDk5FfMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA0MjQ3WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTQyNGNhNDc0ZGFmZDY2NGVmYTU3ZTgyNmRjNTI3ZWE2 ZjkwNWM4NGI3MDNmOTNiZDBhMTI4OTg2NTc3OTZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC31M/moR6lelIt2uksdoRqK0uEDZ+Xt2qAsX40pe6onL9S /DpzgKFnmzTxoS+71cZ65aPrlXCIHGysk+eRiT8UCbFj7YiH35QabXH+6xyAH6j4 e9E8WWgSJGjqysQ3tFluHXM/Y4cQE1NLvZja+As3xQtu7FyiNH/fHOYQ2VXy5SNt xkjiEBmjhvnORjapn9Ib33Blgo+CwtsFg5v6j4ekwm/QkSILD6GwC4pKG9slXWMA niwrEhF/8sW9W59j83/EIg8zawvDT49Qu3vUF7+RfNl81wBIwgBWmeqJOYiQJNEw rmI2fZkjgCopG30KIbbd9b5PeE+d8LYDTeXL++b9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKuQtBPJgFmRT+57G/bO4NOlI99gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkYzFiODc2LTAyNjUtNDRhNC05ZDk0LWRhYTBkMjg0MmU1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISRBQwDQYJKoZIhvcNAQELBQADggEBAGbFjCNcjwPPUaChf6BuxZD3CJ50 ZjXljsk6c4VoTOt2VVHbGH7i+pOiAsNGch2AKcpzp1sYkt0S4sfbcGKXWPBF6LR8 JM09bl3JT2TPwFG1c1kTY4fAvKu+X8h5XgfFfXWE+L4Yv8r2soq7FAuWr9/4Xrck /IB5U7YhsyejUk9crryLlxeqKO6EfINg7hS5sNUHhTA+7D4UNox/iY2wBwhbLH1C 25hczGFiJxxImPXLOFsO1pRnASrN8SkmEVPJOF4Bl5etWUXxYOIbc+sh72xePDNN orX8AvEJk8tlIRqD0Z1Dt1NJTISDnxE13zIDaMe0a5NnUpCVogYqPYqczS8= -----END CERTIFICATE-----Generated at Fri Sep 19 04:37:41 2025 by rpki-client